Virus that I can't repair, delete or rename

[cnw]

Here it is: JS:TrojDnldr-1 {Trj} and I unchecked "SystemRestore" - any ideas?  Thanks.

[DavidR]

Please Help us to Help you In order to help fully we need more information....
   - What OS are you using? is it up to date?
   - What email program are you using - if applicable?
   - avast! version and VPS file (virus database) number, e.g. 0436-4 (see about avast!)
   - What was the virus name, what was the filename, where was it found
     example (C:\windows\system32\infected-filename.xxx)?
Also see this thread for further information and advice User's FAQ.

A search of these forums for JS:TrojDnldr will no doubt return many hits as I believe this topic has been  previously discussed a number of times.

Ensure that you OS is fully up to date.

Also a visit to Eddy's HiJackThis Info and Analysis page, HijackThis log file analyzer and follow the directions there and get back to us if you need more help....

[techie101]

cnw,

Firstly, this trojan was included in the last update:
VPS 0442-3, 15.10.2004

Update your Avast to the latest VPS database.  Avast should allow you the options to Delete/Move or Repair this trojan.

However, if it detected the trojan but is not allowing the options, then you can go directly to the file location via the path indicated, and delete it manually.  No harm will be done.

Good luck

[cnw]

Thanks but I deleted the earlier one, here's the one that keeps coming back:

Virus name: Win32:RegZonTr[Trj]
File: c:\rell11.reg
VPS: 0442-3,0/15/04

I'm running up to date XP on a Dell Dimension 2300

[cnw]

then I get "cannot find the file specified" - cannot process c:\re11Reg file

and to make matters worse another virus that I can't delete, repair, etc:

Name: JS:TrojDnldr-1[Trj]
c;\documents and settings\localservice\localsettings\temp
0442-3, 10/15/04

[Lisandro]

cnw, can you run a boot time scanning and try to get rid of these viruses?
Do you use Windows XP?

[cnw]

Yes, updated AVAST and did that for the whole system and specific areas too.I also get:

UNKNOWN ERROR: app cannot load help file:C:\ProgramFiles\AlwilSoftware\Avast\English\Help\CheckListSimple.chm

[Lisandro]

Yes, updated AVAST and did that for the whole system and specific areas too.I also get:

UNKNOWN ERROR: app cannot load help file:C:\ProgramFiles\AlwilSoftware\Avast\English\Help\CheckListSimple.chm

cnw, I'm not talking about 'on-demand' full scanning... I'm talking about 'boot time schedule scanning'   Am I misunderstand you in this point? Are we talking about the same?

Did you uninstall Internet Explorer? Which is your browser?

[whocares]

cannot process c:\re11Reg file

Delete the file in SafeMode, or if necessary after booting from XP-CD

please read the link "VirusRemoval" below in my sig and
- post a hijackthis-Log
- report the results of Onlinescanners RAV & Trend, as well as scanning with ESCAN
- secure your system & BROWSER better, or this stuff will always come back..

 

P.S.: Google is your friend -> ReadMe

 

[Lisandro]

Delete the file in SafeMode, or if necessary after booting from XP-CD

MoveOnBoot is a very good and effective application to delete any file during the boot time